Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Reddit' disclosed a bug submitted by b'fransrosen' 
b'One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.com'

02 Aug 2022

b'GitLab' disclosed a bug submitted by b'm-narayanan' 
b"Found Origin IP's lead to access to gitlab"

02 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Insecure TLS Configuration #3530'

01 Aug 2022

b'Showmax' disclosed a bug submitted by b'qualwin38000' 
b'delete the subaccount from the user id'

01 Aug 2022

b'Rocket.Chat' disclosed a bug submitted by b'baltpeter' 
b'Insecure use of shell.openExternal() in Rocket.Chat Desktop App leading to RCE'

01 Aug 2022

b'Judge.me ' disclosed a bug submitted by b'netboom' 
b'Race condition on https://judge.me/people'

01 Aug 2022

b'GoCD' disclosed a bug submitted by b'khalidou' 
b'Open S3 Bucket Accessible by any Aws User'

31 Jul 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Corsa Site Scripting Vulnerability (XSS)'

30 Jul 2022

b'MTN Group' disclosed a bug submitted by b'vulnera' 
b'Open redirection at https://smartreports.mtncameroon.net'

30 Jul 2022

b'Phabricator' disclosed a bug submitted by b'dyls' 
b'Possible to make restricted files public on Phabricator via Diffusion'

29 Jul 2022

b'Dropbox' disclosed a bug submitted by b'sayaanalam' 
b"Send Fax from Anyone's HelloFax Account Due to Misconfigured Email Validation"

29 Jul 2022

b'Nextcloud' disclosed a bug submitted by b'ro0telqayser' 
b'@nextcloud/logger NPM package brings vulnerable ansi-regex version'

29 Jul 2022

b'TikTok' disclosed a bug submitted by b'lu3ky-13' 
b'HTML Injection via TikTok Ads Email Share '

28 Jul 2022

b'Panther Labs' disclosed a bug submitted by b'prakash142' 
b'Twitter Account hijack through broken link in https://runpanther.io'

28 Jul 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'albertspedersen' 
b'Hijack all emails sent to any domain that uses Cloudflare Email Forwarding'

28 Jul 2022

b'Acronis' disclosed a bug submitted by b'vkas-afk' 
b'Acronis True Image Local Privilege Escalation Due To Race Condition In Application Verification '

28 Jul 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'nagaro' 
b'Off-by-slash vulnerability in nodejs.org and iojs.org'

28 Jul 2022

b'TikTok' disclosed a bug submitted by b'lu3ky-13' 
b'HTML Injection via Email Share'

27 Jul 2022

b'Cosmos' disclosed a bug submitted by b'cyberboy' 
b'Race condition in faucet when using starport'

26 Jul 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'yakirka' 
b'Node.js - DLL Hijacking on Windows'

25 Jul 2022

1 ... 139 140 141 142 143 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM